gebalamariusz/cloud-audit

Overview

A fast, opinionated AWS security scanner that runs curated checks and produces zero-noise results. It provides copy-paste fixes for each finding, helping developers quickly remediate issues.

Best for

Best for
Developers and DevOps engineers needing quick, low-noise AWS security audits with ready-to-use fixes.

Use cases

• Scan AWS accounts for common security misconfigurations
• Generate actionable fix commands for compliance violations
• Integrate into CI/CD pipelines for pre-deployment security checks

How to use

Install

pip install cloud-audit

Example client config

cloud-audit scan -R\ncloud-audit scan --profile prod --regions eu-central-1\ncloud-audit scan --regions all\ncloud-audit scan --role-arn arn:aws:iam::...:role/audit\ncloud-audit scan --export-fixes fixes.sh\nConfigure defaults in .cloud-audit.yml (regions, min_severity, exclude_checks, time-boxed suppressions). Environment variables (CLOUD_AUDIT_REGIONS, CLOUD_AUDIT_MIN_SEVERITY, ...) override the file; CLI flags override everything. See the configuration guide

Notes

A fast, opinionated AWS security scanner that runs curated checks and produces zero-noise results. It provides copy-paste fixes for each finding, helping developers quickly remediate issues.

58 stars on GitHub. Last updated 2026-05-26. Licensed MIT.

Use cases

• Scan AWS accounts for common security misconfigurations
• Generate actionable fix commands for compliance violations
• Integrate into CI/CD pipelines for pre-deployment security checks

Pros

• Curated checks reduce false positives and noise
• Copy-paste fixes speed up remediation
• Lightweight and fast to run

Cons

• Limited to opinionated checks, may miss niche or custom rules
• Small community with 58 stars, less support and fewer updates
• Python dependency may not suit all environments

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.